Privacy, Risk & Compliance Specialist

This role is for one of our clients

Industry: Technology, Information and Media

Seniority level: Associate level

Min Experience: 2 years

Location: Mumbai, Bangalore, delhi

JobType: full-time

We are looking for a Privacy, Risk & Compliance Specialist to help strengthen and scale our global data protection and privacy governance framework. This role is ideal for professionals who enjoy working at the intersection of privacy regulations, information security, and business operations—ensuring that data protection principles are embedded into day-to-day processes and long-term strategy.

You will play a hands-on role in implementing privacy programs, supporting audits and certifications, and partnering with cross-functional teams to operationalize compliance across international regulations and standards.

What You'll Be Responsible For
Privacy & Data Governance
Build, implement, and continuously improve privacy and data governance programs aligned with global regulations and internal policies.

Conduct privacy risk assessments, gap analyses, and internal reviews to identify compliance and security risks.

Support Privacy Impact Assessments (PIAs), DPIAs, and remediation planning.

Regulatory & Standards Compliance
Support compliance with global data protection laws including GDPR, CCPA, and other regional privacy regulations.

Work with international standards and frameworks such as ISO 27001, ISO 27701, NIST, and HITRUST.

Assist in certification readiness, surveillance audits, and regulatory assessments.

Policy, Documentation & Advisory
Draft, review, and maintain privacy policies, procedures, implementation guides, and compliance documentation.

Advise internal stakeholders on privacy-by-design, data minimization, and secure data handling practices.

Translate regulatory requirements into clear, actionable operational guidance.

Cross-Functional Collaboration
Partner closely with Legal, IT, Security, and Business teams to embed privacy and security controls into systems and workflows.

Support cybersecurity governance initiatives, ISMS documentation, and ongoing compliance activities.

Track compliance actions, risks, and remediation progress through structured reporting.

What Will Help You Succeed
2–3 years of experience in privacy, data protection, information security, risk, or compliance roles.

Strong working knowledge of GDPR, CCPA, and core privacy principles.

Exposure to ISO 27001, ISO 27701, or similar security and privacy frameworks.

Experience supporting audits, certifications, or regulatory compliance initiatives.

Strong documentation, analytical, and stakeholder communication skills.

Preferred Certifications
CIPM (Certified Information Privacy Manager)

CIPP/E (Certified Information Privacy Professional – Europe)

CIPT (Certified Information Privacy Technologist)

Core Skills
Privacy Governance

• Data Protection Compliance
• GDPR & CCPA
• ISO 27001 / ISO 27701
• Risk Assessments
• Information Security
• Audit Support
• Policy Development
  
  

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.